Critical severity9.8NVD Advisory· Published Mar 14, 2023· Updated Jun 17, 2026

CVE-2023-28343

Description

OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Altenergy Power Control Software/Altenergy Power Control Softwaredescription
Altenergy Power Control Software/Altenergy Power Control Softwarellm-create
Range: = C1.2.5
APSystems/Altenergy Power Control Softwarellm-fuzzy
Range: = C1.2.5

Patches

Vulnerability mechanics

References

github.com/ahmedalroky/Disclosures/blob/main/apesystems/os_command_injection.mdnvdExploitThird Party Advisory
apsystems.comnvdProduct
packetstormsecurity.com/files/171775/Altenergy-Power-Control-Software-C1.2.5-Command-Injection.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.068
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000